🚀 New features

🎓 Awareness - Academy

• 🔗 Direct deep link to courses
  You can now copy the direct link of a course from its detail view in the admin panel and share it with your collaborators (for example, in internal newsletters). Upon clicking, the collaborator lands directly on the course: if they don't have an active session, they log in with their usual method and are automatically redirected; if they weren't enrolled, they are automatically enrolled upon arrival. Available for courses in this first version.
  📄 View documentation

• 📚 New courses available in the Academy catalog
  We added 11 new courses to the catalog, focused on regional regulatory compliance and technical security:

  • OWASP Top Ten: 2025 (ES, PT, EN) — A tour of the ten most critical security risks in web applications according to the latest OWASP edition.

  • Prevention of Money Laundering and Terrorist Financing (PLA/FT) – Bolivia (ES) — Key concepts and obligations to prevent money laundering and terrorist financing under Bolivian regulations.

  • Data Privacy – Bolivia (ES) — Principles of personal data protection and privacy best practices within Bolivia's regulatory framework.

  • Mobile Device and Application Security (EN) — Best practices to protect smartphones, tablets, and the applications we use daily.

  • Detecting Online Fraud and Scams (EN) — How to recognize and avoid the most common frauds and scams on the internet.

  • Introduction to LGPD (PT) — Fundamentals of the Brazilian personal data protection law and its impact on daily work life.

  • TISAX (ES) — Introduction to the automotive industry's information security standard and its requirements.

  • Corporate Governance for Banks (PT) — Corporate governance principles applied to the banking sector.

  • IT Governance for Banks (PT) — IT governance best practices in financial institutions.

  • IoT Security: Protecting the Connected World (PT) — Risks and protective measures for connected devices (IoT).

  • Fundamentals and Governance of Law 21.663 (ES) — Fundamentals of Chile's Cybersecurity Framework Law and its governance implications.

  You can now assign them to your collaborators from the course catalog.

✨ Improvements

📊 Insights

• 📥 Export of users by status in the Simulations Overview
  You can now export a CSV with the details of the users behind each status in the simulations overview. The file includes campaigns received, Personal ID, name, email, department, groups, and status of each user, and is generated in your account's language. This makes manual follow-up, resends, and internal reports easier without leaving the platform.

🚀 Campaigns

• 🔗 Validation of external phishing reports
  We improved the integration with email reporting add-ins (such as Outlook or Gmail) to validate that both the campaign and the collaborator belong to the same company before recording the event. This ensures that external reports are correctly reflected in analytics without incorrect records.

• ⚡ Faster and more reliable delivery for large campaigns
  We optimized the sending of campaigns with many recipients: emails are now delivered in batches. Large campaigns are now delivered faster, without affecting or being affected by other operations.

• 🧪 Clear notice on test campaigns
  Test campaigns are always sent immediately so you can quickly verify that emails arrive correctly. The interface now communicates this with a visible notice during creation, so there's no confusion if you set a send date.

🎓 Awareness - Academy

• 🆔 Personal ID visible in Courses and Learning Paths
  You can now see each collaborator's Personal ID directly in the progress table of Courses and Learning Paths, without needing to go to the Analytics section. This data is also included in the CSV files exported from both views, making it easier to look up and cross-reference information.

• ✨ Clearer Academy quick actions
  We simplified the quick actions in the Academy Analytics overview, removing options that didn't belong to this module. We also updated the icons for the available actions to align them with the product's current design. The result is a clearer and more consistent experience when managing courses, learning paths, and assigned games.

• 🔄 Updated courses
  We updated the content of three courses in the catalog: Asset Management and Access Control (ES, PT, EN), Cloud Security (ES, PT, EN), and Network Security (ES). The renewed versions are now available to assign to your collaborators.

🛡️ Threats

• 📥 Incident export in the SIEM Inbox
  You can now export the complete list from the SIEM Inbox as CSV directly from the new design. The export respects any filters and search terms you have applied, and includes category, status, sender, domain, subject, who reported it, and report date. This makes incident analysis and reporting outside the platform easier.

🎨 Platform / UX

• 🎲 Random groups in Smart Groups
  You can now request random groups when creating a Smart Group, for example "a random group of 20 high-risk collaborators." The generation is reliable and consistent, even when combining group size with other filters. Membership is randomly renewed with each sync, always maintaining the defined size.

• 🧠 Smart Groups better understands your requests
  We improved the interpretation of requests when creating Smart Groups: terms such as "repeat offenders," "clickers," or "risky users" are now recognized, and area names are correctly identified even with accents or different capitalization. This reduces rejections in requests that previously failed inconsistently.

🐛 Fixes

🎓 Awareness - Academy

• 🌐 Language fix in exported courses
  Fixed an issue where some text in courses exported in SCORM format was displayed in Spanish, even when the course was configured in another language. Now all content correctly respects the native language selected for the course.

📊 Insights

• 🐛 Duplicate "Compromised" status in the campaign explorer
  In the email events view of the Campaign Explorer, the "Compromised" status appeared twice in the table. We fixed the root cause so that each status is displayed only once, correctly reflecting the campaign data.